Lucene search
+L

235 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/07 12:00 a.m.•1 views

CVE-2024-31306: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPDeveloper Essential Blocks for Gutenberg allows Stored XSS.This issue affects Essential Blocks for Gutenberg: from n/a through 4.5.3...

6.5CVSS5.8AI score0.00385EPSS
SaveExploits0References2
NVD
NVD
•added 2024/03/28 5:15 a.m.•33 views

CVE-2024-30226

Deserialization of Untrusted Data vulnerability in WPDeveloper BetterDocs.This issue affects BetterDocs: from n/a through 3.3.3...

9CVSS9.2AI score0.00864EPSS
SaveExploits0References1
EUVD
EUVD
•added 2024/03/28 4:57 a.m.•18 views

EUVD-2024-28157

Deserialization of Untrusted Data vulnerability in WPDeveloper BetterDocs.This issue affects BetterDocs: from n/a through 3.3.3...

9CVSS6.4AI score0.00864EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/28 4:57 a.m.•98 views

CVE-2024-30226

CVE-2024-30226 affects the WordPress WPDeveloper BetterDocs plugin up to version 3.3.3. The vulnerability is due to deserialization of untrusted data, enabling PHP Object Injection and unauthenticated exploitation. Affects BetterDocs components handling untrusted input; PatchStack and related sou...

9CVSS5.2AI score0.00864EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/28 12:00 a.m.•1 views

CVE-2024-30226: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in WPDeveloper BetterDocs.This issue affects BetterDocs: from n/a through 3.3.3...

9CVSS5.8AI score0.00864EPSS
SaveExploits0References2
NVD
NVD
•added 2023/12/15 3:15 p.m.•26 views

CVE-2023-49184

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPDeveloper Parallax Slider Block allows Stored XSS.This issue affects Parallax Slider Block: from n/a through 1.2.4...

5.9CVSS0.00374EPSS
SaveExploits0References1
OSV
OSV
•added 2023/12/15 3:15 p.m.•15 views

CVE-2023-49184

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPDeveloper Parallax Slider Block allows Stored XSS.This issue affects Parallax Slider Block: from n/a through 1.2.4...

5.4CVSS7.3AI score0.00374EPSS
SaveExploits0References1
Prion
Prion
•added 2023/12/15 3:15 p.m.•32 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPDeveloper Parallax Slider Block allows Stored XSS.This issue affects Parallax Slider Block: from n/a through 1.2.4...

4.9CVSS6.9AI score0.00374EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/12/15 2:56 p.m.•88 views

CVE-2023-49184

CVE-2023-49184 corresponds to a Stored XSS in WPDeveloper Parallax Slider Block. Affected versions are Parallax Slider Block:

5.9CVSS6.7AI score0.00374EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/12/15 2:56 p.m.•44 views

CVE-2023-49184 WordPress Parallax Slider Block Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPDeveloper Parallax Slider Block allows Stored XSS.This issue affects Parallax Slider Block: from n/a through 1.2.4...

5.9CVSS5.9AI score0.00374EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/15 12:00 a.m.•3 views

CVE-2023-49184: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPDeveloper Parallax Slider Block allows Stored XSS.This issue affects Parallax Slider Block: from n/a through 1.2.4...

5.9CVSS6AI score0.00374EPSS
SaveExploits0References2
NVD
NVD
•added 2023/11/18 11:15 p.m.•38 views

CVE-2023-32245

Cross-Site Request Forgery CSRF vulnerability in WPDeveloper Essential Addons for Elementor Pro.This issue affects Essential Addons for Elementor Pro: from n/a through 5.4.8...

8.8CVSS0.00269EPSS
SaveExploits0References1
Prion
Prion
•added 2023/11/18 11:15 p.m.•36 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in WPDeveloper Essential Addons for Elementor Pro.This issue affects Essential Addons for Elementor Pro: from n/a through 5.4.8...

6.8CVSS7.2AI score0.00269EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/11/18 10:32 p.m.•91 views

CVE-2023-32245

CVE-2023-32245 affects WordPress Essential Addons for Elementor Pro (versions up to and including 5.4.8). Connected sources specify a Server-Side Request Forgery (SSRF) vulnerability that is unauthenticated. The issue is mitigated by upgrading to version 5.4.9 or later. Exploitation status is not...

8.8CVSS8.5AI score0.00269EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/11/18 10:32 p.m.•20 views

CVE-2023-32245 WordPress Essential Addons for Elementor Pro Plugin <= 5.4.8 is vulnerable to Server Side Request Forgery (SSRF)

Cross-Site Request Forgery CSRF vulnerability in WPDeveloper Essential Addons for Elementor Pro.This issue affects Essential Addons for Elementor Pro: from n/a through 5.4.8...

5.4CVSS7AI score0.00269EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/18 12:00 a.m.•4 views

CVE-2023-32245: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WPDeveloper Essential Addons for Elementor Pro.This issue affects Essential Addons for Elementor Pro: from n/a through 5.4.8...

8.8CVSS8.1AI score0.00269EPSS
SaveExploits0References2
NVD
NVD
•added 2023/11/07 5:15 p.m.•31 views

CVE-2022-46809

Improper Neutralization of Formula Elements in a CSV File vulnerability in WPDeveloper ReviewX – Multi-criteria Rating & Reviews for WooCommerce.This issue affects ReviewX – Multi-criteria Rating & Reviews for WooCommerce: from n/a through 1.6.7...

9.8CVSS0.00794EPSS
SaveExploits0References1
CVE
CVE
•added 2023/11/07 4:37 p.m.•55 views

CVE-2022-46809

CVE-2022-46809 affects WordPress ReviewX – Multi-criteria Rating & Reviews for WooCommerce (WPDeveloper). The vulnerable component is ReviewX CSV export functionality (CSV injection) in ReviewX

9.8CVSS8.6AI score0.00794EPSS
SaveExploits0References1Affected Software1
zdt
zdt
•added 2023/09/19 12:00 a.m.•423 views

WordPress Essential Blocks 4.2.0 / Essential Blocks Pro 1.1.0 PHP Object Injection Vulnerability

Vulnerability Summary from Wordfence Intelligence Description: Insecure Deserialization/PHP Object Injection via queries Affected Plugin: Essential Blocks, Essential Blocks Pro Plugin slug: essential-blocks, essential-blocks-pro Vendor: WPDeveloper Affected versions: = 4.2.0 Free and = 1.1.0 Pro...

9.8CVSS8.8AI score0.01462EPSS
SaveExploits3
Patchstack
Patchstack
•added 2023/09/15 12:00 a.m.•27 views

WordPress Essential Addons for Elementor Plugin <= 5.8.8 is vulnerable to Privilege Escalation

Software Essential Addons for Elementor Type Plugin Vulnerable versions = 5.8.8 Fixed in 5.8.9 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2023-41955 Patch priority High CVSS severity High 8.8 Developer WPDeveloper PSID 80be75758179...

8.8CVSS6.9AI score0.00822EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder